HP 8/20q, Cli Manual

Page: 101 / 332

8/20q Fibre Channel Switch command line interface guide 101
9 RADIUS server configuration
Authentication can be performed locally using the switch’s security database, or remotely using a Remote
Dial-In User Service (RADIUS) server such as Microsoft RADIUS. With a RADIUS server, the security
database for the entire fabric resides on the server. In this way, the security database can be managed
centrally, rather than on each switch. However, when using a RADIUS server, every switch in the fabric
must have a network connection. You can configure up to five RADIUS servers to provide failover.
You can configure a RADIUS server to authenticate only the switch or both the switch and the initiator
device, if the device supports authentication. A RADIUS server can also be configured to authenticate user
accounts. See ” User account configuration ” on page 21. A secure connection is required to authenticate
user logins with a RADIUS server. See ” Connection security configuration ” on page 87.
This section describes the following tasks:
• Displaying RADIUS server information , page 101
• Configuring a RADIUS server on the switch , page 102
Displaying RADIUS server information
To display RADIUS server information, enter the
show setup radius
command, as shown in the
following example. For information about RADIUS server configuration parameters, see Table 48 .
8/20q FC Switch #> show setup radius
Radius Information
------------------
DeviceAuthOrder Local
UserAuthOrder Local
TotalServers 2
Server: 1
ServerIPAddress 10.0.0.13
ServerUDPPort 1812
DeviceAuthServer False
UserAuthServer False
AccountingServer False
Timeout 2
Retries 0
SignPackets False
Secret ********
Server: 2
ServerIPAddress bacd:1234:bacd:1234:bacd:1234:bacd:1234
ServerUDPPort 1812
DeviceAuthServer True
UserAuthServer True
AccountingServer True
Timeout 2
Retries 0
SignPackets False
Secret ********